Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa
File:                     3f54756d-92cf-32d2-9d67-667c450979c0.roa (raw, json)
Hash identifier:          8DMrTPDlV3GUua+r/VfCIhxjmM4W/UhQGQJgo3XuGAc=
Subject key identifier:   1F:60:20:7A:49:82:EC:CA:EE:63:C6:1F:60:94:D8:12:0B:94:F5:7C
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F4328584A6290860D1DE5DA7C0CC3B6C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     16591
IP address blocks:        136.36.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:86:0d:1d:e5:da:7c:0c:c3:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=f6f79ef4-2347-4e51-b51f-87757ced41aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:7b:de:ac:68:d2:48:bb:3f:2e:56:87:1c:
                    80:80:a2:fb:19:f2:b8:23:fe:09:2d:a5:e1:b7:46:
                    73:29:e2:82:00:e5:37:70:e5:86:eb:f6:e1:2a:0a:
                    5e:dc:db:de:86:e7:b8:27:d6:b5:0a:14:1f:83:5b:
                    8a:1e:04:6d:8e:f3:20:06:a2:c2:8f:d4:e2:6f:82:
                    80:5c:28:9f:fd:99:48:c9:be:81:a7:27:ab:c7:85:
                    72:dd:fb:58:bd:c0:59:4e:5e:3f:b8:a5:cf:e6:af:
                    5f:79:68:c6:cf:4d:0e:6f:4c:fb:45:01:01:ea:12:
                    80:cd:e6:fd:12:ab:1d:43:1b:4b:3b:33:b5:44:aa:
                    01:72:0f:6e:c5:42:fe:1d:55:c2:09:c3:4b:04:8f:
                    3f:76:9d:34:ae:1e:ca:c5:fb:07:e6:62:8d:9f:8a:
                    e9:ce:e6:f3:8e:0c:14:b9:c5:13:9b:1f:45:a1:a4:
                    22:11:8a:47:de:e5:b9:50:99:57:f6:3c:d6:34:00:
                    30:dc:07:9d:7b:c7:7b:cb:da:54:8e:d6:47:07:15:
                    aa:0e:97:7a:e1:8b:45:8b:64:da:e5:81:42:b8:45:
                    d7:c3:2f:ed:32:2c:e3:d0:e7:0a:06:93:3f:9d:81:
                    16:7a:ca:62:33:7c:2d:37:ab:74:83:d9:54:d0:b7:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:20:7A:49:82:EC:CA:EE:63:C6:1F:60:94:D8:12:0B:94:F5:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.36.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7e:a8:64:8f:f7:b1:b0:fd:1b:aa:16:1e:30:88:3d:83:27:
         50:e3:41:f0:03:80:fd:c2:fb:70:44:cc:6c:4e:c7:36:08:7a:
         92:4f:22:70:6a:88:6f:bc:61:b6:d6:60:d1:4c:1c:f8:bb:49:
         11:88:e8:fa:93:91:ef:89:71:3c:69:52:81:9a:4c:11:74:aa:
         d2:16:ee:92:52:4d:0d:eb:5e:1d:72:cf:2e:c3:2c:57:53:10:
         ab:52:05:ed:6e:d3:21:96:81:59:ce:47:41:e2:2e:44:58:38:
         ef:cb:52:f7:e4:0e:a6:9d:e7:7f:6c:a2:09:e6:5b:77:ed:01:
         87:6b:88:e6:ca:c2:a8:68:30:db:f7:d2:29:d1:1d:6e:d1:e0:
         c0:65:ca:e9:90:7b:d3:0a:db:5f:d6:9b:b2:67:7a:e0:90:36:
         9c:c1:55:50:db:17:65:b3:74:2e:42:d4:bc:3e:ad:e7:87:e4:
         d4:d5:32:4a:23:aa:e1:7e:e7:b5:89:59:a2:f9:5b:70:68:75:
         92:c0:2a:22:d7:0d:c6:81:80:b9:b4:fe:1f:a5:f5:85:72:ce:
         af:0b:77:e6:5d:aa:cd:c9:19:1c:d1:11:c2:24:98:01:79:99:
         53:24:e7:d8:48:32:94:ae:f8:8c:a2:19:09:90:e1:46:5e:f1:
         ef:15:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:23:53 2025 by rpki-client